A. Identity

The data controller responsible for your information is CASA OAXACA, S.A. de C.V., García Vigil 407 Col. Centro, Zip Code 68000, Oaxaca de Juárez, Oaxaca, México, which you can contact online at: privacidad@casaoaxaca.com.mx The privacy notice outlined here applies to the Casa Oaxaca Hotel website.

B. Personal Data

This Privacy Policy describes how and when we collect and use your personal information: when you provide the information to Casa Oaxaca Hotel directly, when you visit Casa Oaxaca Hotel website, when you use any our services; and when collected by Casa Oaxaca Hotel through other means allowed by the law.

Personal data obtained by Casa Oaxaca Hotel through these means includes:

1. Contact Information: your name, address, phone number, marital status, signature, email address, gender, age, and date of birth.
2. Payment Method: Name on card, card number and expiration date.
3. Billing Data: name or business name, tax registration number and tax domicile.
4. Preference Data: details relating to your room, service and travel preferences.

C. Sensitive Personal Data

Personal data is classified as sensitive when touching on the most private areas of the data owner’s life, or whose misuse might lead to discrimination or involve a serious risk for said data owner. In particular sensitive data is considered that which may reveal items such as race, religion, politics, sex life or health. When you stay in Casa Oaxaca Hotel, and you provide any information concerning your health or any disabilities, this data will only be used to serve you better and to meet your specific needs.

D. Purposes of the data processing

Events when personal data is legally required in order for Casa Oaxaca Hotel to provide a service:

1. Casa Oaxaca Hotel uses the personal information provided by you in order to perform or deliver the services you requested, or they are part of a program for which you registered. These events include making reservations, buying vacation packages, becoming a vacation club member, attending events or social gatherings, or purchasing goods and / or tour and travel-related services. 2. Casa Oaxaca Hotel may use the personal data you provide to better serve you and, where appropriate, identify your preferences during your stay, in order to make it more enjoyable.

Events when personal data is not required for Casa Oaxaca Hotel to provide a service:

1. Casa Oaxaca Hotel may also use your information to offer you promotions, tourism and consumer products, special services, newsletters, surveys, giveaways and online contests.

E. Options to limit the Use or Disclosure of Personal Data

At any time you may request that your personal information not be used for purposes other than those purposes that are legally required for Casa Oaxaca Hotel to provide you with a service. You must submit this request by email at privacidad@casaoaxaca.com.mx

F. Rights of Data Owners

You are able to exercise your rights of access, rectification, cancellation and objection to the information you provided to Casa Oaxaca Hotel, under Federal Law on Protection of Personal Data Held by Private Parties. You may do so by email at: privacidad@casaoaxaca.com.mx

Any such requests must include at least the following items:

(i) The data owner’s name and address or other means to notify him of the response to this request;
(ii) Documents establishing the identity or, where appropriate, legal representation of the data owner;
(iii) A clear and precise description of the personal data with regard to which the data owner seeks to exercise any of the abovementioned rights;
(iv) Any other item or document that facilitates locating the personal data. If the request is missing any of these requirements, the Department of Personal Data may respond within 5 days of your request and ask that you provide the required information or documents. In this event, you will have 10 days to submit the needed information or documents. If you do not respond with the missing items in that timeframe, no further action will be taken and no changes will be made to your personal data or their usage.

Casa Oaxaca Hotel will notify the data owner, within a maximum of 20 days counted from the date of receipt of the request, of the determination made, so that, where apppropiate, same will become effective within 15 days from the date on which the notice is provided.

G. Control and Security of Personal Data

Casa Oaxaca Hotel agrees to take necessary precautions to protect the data it has collected, utilizing security technologies and procedures to restrict access, use, or disclosure of personal data without consent. For example, the personal data you provide will be stored on computer servers in secure data centers with restricted access. For online transactions, Casa Oaxaca Hotel also uses security technologies to protect data that is transmitted electronically, such as the use of a secure server on the Secure Socket Layer (SSL).

However, no security system or data transmission devices over which Casa Oaxaca Hotel does not retain absolute control or is dependent on the Internet can be guaranteed to be totally secure.

H. Electronic Media and Cookies

In the event that you visit our website, cookies will be generated and stored on your computer in order to provide you with a better experience. Cookies are small pieces of information that are transferred to your browsers by websites.

They are stored on your computer’s hard drive and are used to determine your preferences when you connect to our website and to track users’ behavior online and activities on our website. Some sections of our website require that visitors have cookies enabled in order for the sites to be fully functional. Cookies allow us to:

a) Recognize when you enter our sites and offer a personalized experience,
b) Know and activate the customized settings you specified for our websites, allowing our servers to transfer the correct information to you. For example, cookies allow us to detect the bandwidth you have selected when arrive on our site home page so that information is sent to your browser in the proper form,
c) Estimate the size of our audience and measure certain traffic parameters. Each browser that accesses our sites acquires a cookie that measures the frequency of use and what sections of our website are visited. This reflects visitors’ habits and preferences. We use this information to improve our website content, headlines and promotions. Cookies also help us track some online activities. For example, we use cookies in some online surveys to tell us if you have already answered a survey so we don’t ask you to answer it again. You can check your web browser’s “Help” section to learn how to avoid accepting new cookies, to have your browser tell you when you receive a new cookie, or to disable all cookies. Remember that cookies allow you to take advantage of our website most useful features, so Casa Oaxaca Hotel recommends that you leave them turned on.

I. Transfer of Personal Data

Casa Oaxaca Hotel only transfers personal data in the cases established in the article 37 of the Federal Law on Protection of Personal Data Held by Private Parties.

J. Changes to this Privacy Notice

Casa Oaxaca Hotel may update this privacy notice at any time. In the event that substantial changes are made to our notice, we will notify you on the websites listed in the footer “Privacy Notice”. We also recommend that you visit this statement periodically in order to be aware of any updates. I agree and accept the terms of Privacy Notice, and otherwise I will get in contact with Casa Oaxaca Hotel as indicated in the subsections E and F of this Privacy Notice.

In case of any grievance or complaint about the treatment of your personal data, you can contact the Nacional Institute for Transparency, Access to Information and Data Protection.

Date of last revision: January 10, 2018.